This document discusses some of the legal questions that can arise in cloud computing. It notes that while cloud services provide abstraction from infrastructure location and management, geographic location and local laws still apply. When data is processed in the cloud, the duties of the data controller remain even as control of the infrastructure passes to cloud providers. Due diligence is important to understand any potential legal liabilities, as outstanding issues could discourage potential acquisitions or concern their lawyers. While prosecution for legal violations may be unlikely, tort liability remains broadly applicable in cloud computing.